Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/2618/BFYDfHNXz3f3DQh7ldupGgODZ0o.roa
File: BFYDfHNXz3f3DQh7ldupGgODZ0o.roa (raw, json)
Hash identifier: 4J5B5ab0UvtREoxCvbEjhof9upQ4t4Q0Ovk6QH7ir5Y=
Subject key identifier: 04:56:03:7C:73:57:CF:77:F7:0D:08:7B:95:DB:A9:1A:03:83:67:4A
Certificate issuer: /CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Certificate serial: 4C23
Authority key identifier: 01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/BFYDfHNXz3f3DQh7ldupGgODZ0o.roa
Signing time: Tue 25 Mar 2025 06:07:53 +0000
ROA not before: Tue 25 Mar 2025 06:07:53 +0000
ROA not after: Sat 27 Sep 2025 02:40:14 +0000
asID: 63603
IP address blocks: 103.102.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 19491 (0x4c23)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0136041A2F53F26B420D6BD4FD0E9C2D77320971
Validity
Not Before: Mar 25 06:07:53 2025 GMT
Not After : Sep 27 02:40:14 2025 GMT
Subject: CN=0456037C7357CF77F70D087B95DBA91A0383674A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:33:04:f7:c2:07:c6:be:69:ea:1b:4d:73:
29:be:01:0e:f5:fb:57:9e:ed:d4:a3:9d:2c:00:11:
6c:e6:bb:36:d7:e9:e0:b8:fd:27:ce:30:ef:0e:df:
a0:90:37:b6:ae:4a:91:eb:fe:31:bb:fa:f2:22:ef:
35:c5:5e:83:31:f9:28:08:9c:ef:21:38:d3:da:05:
01:23:dd:54:9b:d8:c5:64:43:49:a7:f7:63:c3:85:
2b:30:82:ac:a8:cd:59:88:e7:ac:90:09:c1:bb:05:
a7:b2:94:c1:99:f3:b8:7b:8b:62:bf:54:d9:df:e3:
7c:6e:57:f9:b0:18:72:ef:cb:7c:46:d4:a6:2a:e4:
ae:17:7c:b4:24:ea:61:53:cf:b1:a6:d1:76:30:0b:
20:78:f2:dd:f7:46:04:be:f7:bc:34:52:c3:e6:a5:
1a:a7:cd:13:1a:12:90:1e:79:c5:9f:f3:4e:77:c0:
d3:f3:d2:ac:13:c6:ed:56:a1:7c:7d:a6:8b:00:8a:
c7:d2:51:b1:5a:fb:93:4f:34:84:f6:68:81:e6:22:
ed:f2:e1:b5:c7:07:44:35:ba:f1:e8:8f:54:11:03:
0f:72:c6:d1:cf:5c:00:9a:a3:dc:c1:2e:dd:03:4d:
1d:93:86:44:68:d2:4c:b3:87:35:a5:65:2c:0f:19:
6d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:56:03:7C:73:57:CF:77:F7:0D:08:7B:95:DB:A9:1A:03:83:67:4A
X509v3 Authority Key Identifier:
keyid:01:36:04:1A:2F:53:F2:6B:42:0D:6B:D4:FD:0E:9C:2D:77:32:09:71
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/ATYEGi9T8mtCDWvU_Q6cLXcyCXE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/2618/BFYDfHNXz3f3DQh7ldupGgODZ0o.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
103.102.196.0/24
Signature Algorithm: sha256WithRSAEncryption
88:4e:5e:73:01:57:43:2c:2f:e3:ab:4f:a7:bb:1c:21:1a:f4:
ca:fc:f5:4a:e4:10:b5:69:ec:91:50:e3:5c:24:ba:5e:3e:95:
3b:4b:1d:1b:fd:06:95:cb:b6:02:e0:65:72:bb:54:11:8d:44:
b4:87:00:59:49:b2:ac:f7:d2:7d:64:4e:06:91:de:55:a9:e1:
11:27:25:11:3d:44:25:6e:c2:93:e0:7b:0b:5a:8d:35:71:3d:
a3:85:f7:d8:83:2a:89:ad:a1:c8:4b:04:00:b7:04:b8:12:27:
e6:3b:d9:6d:42:7c:aa:30:97:8c:de:4b:ac:8f:6d:ca:07:ef:
92:22:58:55:92:aa:fd:18:82:94:cc:e4:14:90:30:58:cc:10:
e9:b2:82:50:4f:d0:2c:be:50:8b:f9:b2:14:94:92:88:9f:81:
28:28:70:38:46:d7:d2:6c:cb:bc:6a:5e:5b:95:e7:e1:7d:4c:
9b:47:96:d2:3b:6b:09:de:66:e1:a8:7f:6f:d5:66:59:cb:19:
eb:92:4b:da:9d:23:fa:ec:7d:03:5c:4d:40:58:82:17:eb:10:
fa:9b:a1:34:1d:78:2c:7c:0e:4e:f8:16:96:42:58:7f:ec:56:
2e:e3:9a:10:31:16:76:aa:53:83:8c:06:37:b4:88:36:f8:23:
fe:4a:79:11
-----BEGIN CERTIFICATE-----
MIIE1zCCA7+gAwIBAgICTCMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMDEz
NjA0MUEyRjUzRjI2QjQyMEQ2QkQ0RkQwRTlDMkQ3NzMyMDk3MTAeFw0yNTAzMjUw
NjA3NTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKDA0NTYwMzdDNzM1N0NG
NzdGNzBEMDg3Qjk1REJBOTFBMDM4MzY3NEEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6bzME98IHxr5p6htNcym+AQ71+1ee7dSjnSwAEWzmuzbX6eC4
/SfOMO8O36CQN7auSpHr/jG7+vIi7zXFXoMx+SgInO8hONPaBQEj3VSb2MVkQ0mn
92PDhSswgqyozVmI56yQCcG7BaeylMGZ87h7i2K/VNnf43xuV/mwGHLvy3xG1KYq
5K4XfLQk6mFTz7Gm0XYwCyB48t33RgS+97w0UsPmpRqnzRMaEpAeecWf8053wNPz
0qwTxu1WoXx9posAisfSUbFa+5NPNIT2aIHmIu3y4bXHB0Q1uvHoj1QRAw9yxtHP
XACao9zBLt0DTR2ThkRo0kyzhzWlZSwPGW0DAgMBAAGjggHzMIIB7zAdBgNVHQ4E
FgQUBFYDfHNXz3f3DQh7ldupGgODZ0owHwYDVR0jBBgwFoAUATYEGi9T8mtCDWvU
/Q6cLXcyCXEwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg
UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMjYx
OC9BVFlFR2k5VDhtdENEV3ZVX1E2Y0xYY3lDWEUuY3JsMGMGCCsGAQUFBwEBBFcw
VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF
M0QwMDAwL0FUWUVHaTlUOG10Q0RXdlVfUTZjTFhjeUNYRS5jZXIwDgYDVR0PAQH/
BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y
cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzI2MTgvQkZZRGZITlh6M2Yz
RFFoN2xkdXBHZ09EWjBvLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu
bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAGdmxDANBgkqhkiG9w0BAQsFAAOCAQEAiE5ecwFXQywv46tPp7scIRr0yvz1
SuQQtWnskVDjXCS6Xj6VO0sdG/0Glcu2AuBlcrtUEY1EtIcAWUmyrPfSfWROBpHe
VanhESclET1EJW7Ck+B7C1qNNXE9o4X32IMqia2hyEsEALcEuBIn5jvZbUJ8qjCX
jN5LrI9tygfvkiJYVZKq/RiClMzkFJAwWMwQ6bKCUE/QLL5Qi/myFJSSiJ+BKChw
OEbX0mzLvGpeW5Xn4X1Mm0eW0jtrCd5m4ah/b9VmWcsZ65JL2p0j+ux9A1xNQFiC
F+sQ+puhNB14LHwOTvgWlkJYf+xWLuOaEDEWdqpTg4wGN7SINvgj/kp5EQ==
-----END CERTIFICATE-----
Generated at Fri Apr 4 18:38:43 2025 by rpki-client